I will have to ask you what kind of application(s) your case is referring to in more detail.
Normally, you set one SSID for staff and another SSID for guests that will be routed to a guest portal site.
So if you enable “Bandwidth Management” in the guest SSID and set up the bandwidth speed for download and upload using either “Per VAP” (the guest SSID itself) or “per client” in the guest SSID, all the guest users that are accessing the guest SSID will be limited to the speeds you set up, which means throttling the bandwidth to the Internet or even internal resources. However, generally we recommend customers enable “Block LAN Access” so that guest users won’t be able to access the internal resources (LAN).
If you could elaborate your specific scenario in more detail, I would appreciate it.